MCSE Planning and Maintaining a Windows Server 2003 Network Infrastructure [Electronic resources]: Exam 70-293 Study Guide

Michael Crosset al.

نسخه متنی -صفحه : 174/ 18
نمايش فراداده

Exam Objectives Frequently Asked Questions

The following Frequently Asked Questions, answered by the authors of this book, are designed to both measure your understanding of the Exam Objectives presented in this chapter, and to assist you with real-life implementation of these concepts. You will alsogain access to thousands ofotherFAQs at ITFAQnet.com.

1.

I support a very small network with only a handful of PCs and a single server. Do I still need to set up a test lab to upgrade from Windows NT to Windows Server 2003?

2.

What are the advantages of deploying an AD structure consisting of multiple domains, rather than a single domain with a separate OU for each department?

3.

I have recently begun a new position as a network administrator for a Windows Server 2003 forest containing many domains and child domains. The previous administrator created a number of GPOs, and it seems as if each network user has different policy settings applied to their accounts. I would like to simplify the GPO implementation on the network and wish to begin by creating a “baseline” report of exactly which GPOs are in effect for the various users on the network. What is the most efficient means of accomplishing this?

4.

What happens to Windows NT trust relationships when you upgrade to Windows Server 2003?

5.

My company is working on a limited budget for its Windows Server 2003 upgrade. Do I need to provide separate licenses for the equipment in my training lab?

Answers

1.

Yes, even small environments will benefit greatly from testing any new technologies before they are implemented into the production environment. In some respects, thorough testing is even more critical for a small network. Consider that if one node in your four-way SQL Server cluster fails during the upgrade process, you have three more servers in the cluster to handle user requests until you correct the failed upgrade. If you have only one server to provide file and print shares, applications, database, and e-mail, and that server fails, you can imagine the kind of chaos that would commence.

2.

The chief difference between these two deployments is that of security requirements. Some security settings—such as auditing, password complexity requirements, and account lockout policies—can be implemented only at the domain level. If you have a group of users who require a substantially different set of security mechanisms than the rest of your network, you might wish to create a child domain for that group. Features such as two-way transitive trusts will still enable you to manage multiple domains centrally.

3.

You can use the GPResult command-line utility in the Windows Server 2003 Resource Kit. GPResult provides the same functionality as the Resultant Set of Policy Logging mode, but you can run it from the command line, during each user’s logon script.

4.

When you upgrade a Windows NT domain to a Windows Server 2003 domain, all of your existing Windows NT trusts will be preserved as-is. Remember that trust relationships between Windows Server 2003 domains and Windows NT domains are nontransitive.

5.

If the training lab machines will be either decommissioned or transferred from the test environment into production, you should not need a separate license than what you’ve budgeted for the machine upgrades. If, however, the test lab will be a permanent or semipermanent installed base of equipment, you do need to provide separate licensing for the software in the test lab.